AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1791734079)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791734079 advisory. - Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key...

CVE-2021-41773

CVE-2021-41773 POC & Lab For CVE-2021-41773 Setup Lab $ git clone https://github.com/0xc4t/CVE-2021-41773 $ cd CVE-2021-41773 $ docker build -t cve-2021-41773 . $ docker run --name cve-2021-41773 -p 81:80 cve-2021-41773 PoC RCE curl...

apache_2.4.50

Apache HTTP Server 2.4.50 LFI & RCE A python3 script for the CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI & RCE. RCE requires cgi-bin to be enabled Getting Started Executing program LFI python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE python3 apache2.4.50.py -t...

cve-2021-41773

Apache 2.4.49 - Path Traversal or Remote Code Execution cve-2021-41773.py is a python script that will help in finding Path Traversal or Remote Code Execution vulnerability in Apache 2.4.49. Vulnerable instance of Docker is provided to get your hands dirty on CVE-2021-41773 If CGI-BIN is enabled...

perf-exploiter

perf-exploiter CVE-2014-2630 Em um de nossos testes de penetração recentes, abusamos de uma vulnerabilidade que afeta um binário suid chamado "xglance-bin". Parte da solução de monitoramento de desempenho da HP , ela nos permitiu escalar nossas sessões locais sem privilégios em alguns sistemas...

CVE-2026-101947

ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path is merely surrounded with single quotes; embedded single quotes are not escaped...

CVE-2026-101947

The ExifTool for photo and video 5.0.1-gms by CellHubs is vulnerable to a Local OS command injection (CWE-78). The flaw exists in the CSV-export path because the application constructs shell command strings from file paths and invokes /system/bin/sh -c without properly escaping embedded single qu...

CVE-2026-101947 ExifTool for photo and video 5.0.1 - Local OS command injection through filenames during CSV export

ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path is merely surrounded with single quotes; embedded single quotes are not escaped...

EUVD-2026-96030

ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path is merely surrounded with single quotes; embedded single quotes are not escaped...

Bin-Finder

Description This tool looks for either the processes that have a certain binary loaded or the processes that don't. This is useful in the following scenarios: It allows to detect processes where an specific EDR/AV dll is not loaded. This could lead to EDR's exception detection. It allows to obtai...

CVE-2026-78796

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file...

CVE-2021-41773

CVE-2021-41773 Vulnerable service Installation Several options: 1. Docker container docker run -d -p 8080:80 12345qwert123456/apache2449cve-2021-41773 2. Dockerfile git clone https://github.com/12345qwert123456/CVE-2021-41773.git cd CVE-2021-41773-Vulnerable-service/2.4.49 docker build -t...

EUVD-2026-95858

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file...

CVE-2026-78796

An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file...

CVE-2026-78796

The Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router (v1.3.241114.024540 and before) contains a vulnerability that allows a remote attacker to perform arbitrary code execution . The flaw is located in the www extbackslash cgi-bin\upgrade file. No specific remediation or explo...

cve-2021-42013

Apache 2.4.50 - Path Traversal o Remote Code Execution CVE-2021-42013.py es un script de Python que ayudará a encontrar la vulnerabilidad de Path Traversal o Remote Code Execution en Apache 2.4.50. Se proporciona una instancia vulnerable de Docker para poner manos a la obra con CVE-2021-42013 Si...

UBUNTU-CVE-2026-75818

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerabil...

CVE-2026-75818

A flaw was found in GNU Aspell's prezip-bin utility. The decompression component does not properly validate buffer space when decompressing input files. An attacker could convince a user to process a specially crafted compressed file, triggering out-of-bounds memory operations that cause memory...

DEBIAN-CVE-2026-75818

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

AZL-105969 CVE-2026-75818 affecting package aspell 0.60.8.1-1

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...